New customers get a 20% discount — applies always, to all orders. Sign up and use it right away!

Privacy Policy

The controller of the personal data of the online store www.r14.ee/r14-veinid is Esperan OÜ (registry code 10711179) located at Müürivahe 14, e-mail info@revalcafe.ee. The controller has appointed a data protection specialist whose contact details are: karmen@revalcafe.ee

What personal data is processed

  • name, telephone number and e-mail address;
  • delivery address;
  • the cost of goods and services and data related to payments (purchase history);
  • customer support data;
  • IP address;
  • in the case of the sale of alcoholic beverages, the data necessary for determining age according to the age control solution used.

For what purpose is personal data processed

Personal data is used to manage the customer's orders and deliver goods.

Purchase history data (date of purchase, goods, quantity, customer data) is used to compile an overview of purchased goods and services, to analyse customer preferences and, among other things, for the purpose of resolving consumer disputes.

Personal data such as e-mail, telephone number, customer name are processed in order to resolve issues related to the provision of goods and services (customer support). E-mail is also used for sending invoices, and the phone number is used to notify the goods that have reached the parcel machine.

The IP address or other network identifiers of the user of the online store are processed for the provision of the online store as an information society service and for the production of web usage statistics.

Legal basis

The processing of personal data is carried out for the purpose of fulfilling the contract concluded with the customer (management of customer orders, delivery, return of goods and payments). The processing of personal data is carried out in order to comply with a legal obligation (including accounting and compliance with the requirements regulating the sale and delivery of alcoholic beverages).

The processing of personal data is necessary for the legitimate interest of the controller, which consists in the collection of purchase history data for the purpose of resolving potential consumer disputes. To view the analysis of legitimate interest, send an e-mail to info@r14.ee. Data processing is carried out with the consent of the customer for the performance of profiling and direct marketing.

With the customer's consent, we process their personal data for direct marketing and profiling purposes, including analysing the customer's purchase history and preferences, preparing personal content and product recommendations, and sending newsletters and marketing information by e-mail.

Recipients to whom personal data are transferred

Personal data is processed by the employees of the company, for the performance of whose duties access to personal data is necessary. Customer support and purchase data is processed to solve purchases, purchase history, customer inquiries and problems.

The data related to accounting is processed for keeping accounting records and for fulfilling the company's legal obligations.

The online store may transfer the customer's personal data to service providers whose services are used for the operation of the online store and the execution of orders.

Such service providers may include:

  • payment service providers;
  • banks;
  • courier and parcel machine service providers;
  • age control service providers;
  • online store accommodation and technical maintenance service providers;
  • other service providers whose participation is necessary for the execution of the order or for the operation of the online store.

The transfer of personal data to the recipients of the authorized processors of the online store takes place on the basis of contracts concluded with the online store and the authorized processors. Processors are obliged to ensure appropriate safeguards for the processing of personal data in accordance with Article 28 of the GDPR.

Security and access to data

Personal data is stored on ZONE servers located in the territory of a Member State of the European Union or countries that have joined the European Economic Area. The data may be transferred to countries whose level of data protection has been assessed by the European Commission as adequate or for a third country company for which the protection measure referred to in Article 46 or 47 or 49(1) of the GDPR has been applied.

The employees of the online store have access to personal data, who can access the personal data in order to resolve technical issues related to the use of the online store and provide customer support services.

The online store implements appropriate physical, organizational and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure, which are:

  • data exchange with the e-shop is via an encrypted connection;
  • the customer's passwords are kept encrypted;
  • standard encryption is used when sending e-mails;
  • firewall and appropriate antivirus have been applied to protect the e-shop servers;
  • regular backups are created, which are kept separate from the server of the e-shop.

Access and correction of personal data

Personal data can be accessed and corrected in the user profile of the online store or through customer support. If the purchase has been made without a user account, the personal data can be accessed through customer support. If the request for access to personal data is submitted electronically, the information shall also be provided by means of publicly available electronic means.

Withdrawal of consent

If the processing of personal data is based on the customer's consent, the customer has the right to withdraw the consent under the customer account settings or by notifying customer support thereof by e-mail.

Preservation

When closing the customer account of the online store, personal data, except for personal data (purchase history data), which need to be stored for accounting purposes or for resolving consumer disputes, will be deleted.

In the case of disputes related to payments and consumer disputes, personal data will be stored until the claim is fulfilled or the limitation period expires.

Personal data contained in accounting source documents are stored for seven years.

Restriction

The customer has the right to request the restriction of the processing of their personal data if the data is incorrect or incomplete or if their personal data is processed unlawfully.

Objections

The customer has the right to object to the processing of their personal data if they have reason to believe that there is no legal basis for processing their personal data.

Deletion

To delete personal data, customer support must be contacted by e-mail. The request for deletion shall be replied to no later than within a month and the period of deletion of the data shall be specified. The response to the request also highlights the personal data that is not deleted and on what legal basis and for what reason.

Transfer

The request for the transfer of personal data submitted by e-mail shall be replied to within one month at the latest. Customer support identifies the person and informs about the personal data subject to transfer.

Direct marketing messages

The e-mail address is used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, the corresponding reference must be selected in the footer of the e-mail or customer support must be contacted.

If personal data are processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support by e-mail (the relevant information must be provided clearly and separately from any other information).

Cookies and web analytics

The online store uses cookies and other similar technologies for the purpose of operating the online store, ease of use, security and analysing the use of the web. The online store may use analytics, statistics, marketing and other cookies.

We use Google Analytics 4 to analyse website traffic, usage and e-commerce performance, and to improve user experience. Through Google Analytics, we may process information about your visit to the website, your device you use, your pages and your actions on this website. We use Google Analytics analytical cookies and related technologies only with the prior consent of the user.

We use Meta Pixel cookies and similar technologies to measure the use of the website and the effectiveness of marketing activities and to target advertising. Meta Pixel may collect information about the pages you visit, the products you have viewed, the shopping cart activities and purchases. The use of Meta Pixel is carried out only with the prior consent of the user.

Dispute Resolution

The customer has the right to file a complaint with the Data Protection Inspectorate if they find that their rights have been violated in the processing of their personal data. Disputes related to the processing of personal data are resolved through customer support (info@r14.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).